full-disclosure

Open Source and information security mailing list archives

Message-ID: <f867a521e5ea13d5128422fd8a8d2042@cime.net>
Date: Thu, 29 May 2014 14:48:52 -0700
From: "CIURANA EUGENE (pr3d4t0r - Full Disclosure)" <fulldisclosure@...e.net>
To: <fulldisclosure@...lists.org>
Subject: Re: [FD] TrueCrypt?

On 2014-05-29 14:18, Justin Bull wrote: 

> But why go out in that
style? Why not be frank? Why be so careless as to
> recommend
BitLocker?
> 
> The diff was meticulous but the website and comms were
not. It doesn't add
> up.

The general consensus in some quarters (e.g.
encryption and topical IRC channels across various networks) is that the
developer(s) were identified and served with a National Security Letter
(NSL). Since its existence can't be divulged, and since the suggestion
to use BitLocker is ridiculous to anyone with a clue, the demise of the
TrueCrypt site and its circumstances is viewed as a canary-in-the-mine.
A way of alerting users. 

Think of Lavabit a year ago and how they were
coerced to open up their encryption. They went out of business rather
than surrender the keys and create a false sense of security among their
users. 

Cheers, 

pr3d 

_______________________________________________
Sent through the Full Disclosure mailing list
http://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives